Clockwork
v1.0.2Clockwork integration. Manage data, records, and automate workflows. Use when the user wants to interact with Clockwork data.
⭐ 0· 77·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim a Clockwork integration and the SKILL.md exclusively instructs using the Membrane CLI to connect, discover actions, run actions, and proxy requests to Clockwork — all coherent with the stated purpose.
Instruction Scope
Instructions focus on installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests. They do not ask for unrelated files, system-wide credentials, or to exfiltrate data beyond the Membrane/Clockwork flow.
Install Mechanism
No install spec in the registry (instruction-only), but the SKILL.md asks users to run `npm install -g @membranehq/cli`. This is a public npm package (reasonable for a CLI), but installing global npm packages requires trust in the package owner and network access.
Credentials
The skill declares no required environment variables, secrets, or config paths. The instructions rely on Membrane to manage credentials and explicitly advise against asking users for API keys, which is proportionate.
Persistence & Privilege
Skill does not request persistent/always-on presence (always: false) and doesn't instruct modifying other skills or agent configs. Autonomous invocation is allowed by default but not combined with other concerning behaviors.
Assessment
This skill is an instruction-only integration that uses the Membrane CLI to manage a Clockwork connection. Before installing the CLI, verify the @membranehq/cli npm package (publisher, version, and npm/github page). Understand that using the CLI and the Membrane proxy will route requests/responses through Membrane's service, so any data you send to Clockwork via the proxy will pass through Membrane. If you require on-prem or stricter data controls, review Membrane's privacy/security docs or avoid proxying sensitive data. Otherwise, the skill's requirements and instructions are proportionate to its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk978zj7m6fqsfzyecz68y2mxt98431d1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.